111
Hackers use DNS poisoning on hotel Wi‑Fi to steal Microsoft 365 accounts (reliaquest.com)
submitted 3 months ago by to c/technology@lemmy.world
11 comments fedilink hide all child comments
 

all 11 comments

sorted by: hot top controversial new old
[–] 26 points 3 months ago (4 children)

Don't EVER use any public wifi without a proper VPN. As soon as you connect, launch the VPN. Hotels, museums, conferences, coffeshop, busses and trains, and library wifis are the worst. Even homes of friends.

I've seen wireshark traffic that would make your blood curl.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 4 points 3 months ago

    On my last vacation, I was in a hotel you could control the chromecast sessions of other guests.
    Did a bit of testing (maybe also a bit of trolling) to verify the control.
    But considering that...That's a yikes.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 9 points 3 months ago (1 child)

    That's why I've been arguing for a long time that using VPN for everything by default is just basic security.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 1 point 3 months ago

    The only reason I don't currently is that my phone's VPN connection doesn't handle network switching gracefully. Otherwise I try and tunnel all my traffic through my home network.

    As a useful side effect, I need to expose far less of my IoT devices .

  • permalink
  • fedilink
  • source
  • parent
    • [–] 8 points 3 months ago

    No, not my Microsoft 365 account!

  • permalink
  • fedilink
  • source
    •
    [–] 4 points 3 months ago

    Do not connect to public wifi if you do use a VPN...

  • permalink
  • fedilink
  • source
    •
    [–] 3 points 3 months ago* (1 child)

    Why did the hotel need over 360 accounts?

    SpoilerJoke

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •